This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/2a9acf-2f1e-4c9c-b810-a047816d6283/1/RIMxhRs1WdPMgpn2sCDvN44uSwQ.mft File: RIMxhRs1WdPMgpn2sCDvN44uSwQ.mft (raw, json) Hash identifier: IOXBols1OITmaIqw/WBakcFdo7hyqOF7uoAc4GC6Wfw= Subject key identifier: A5:E4:F6:A4:01:7C:42:0A:E1:54:22:A5:69:EE:A4:47:CF:46:9C:FB Authority key identifier: 44:83:31:85:1B:35:59:D3:CC:82:99:F6:B0:20:EF:37:8E:2E:4B:04 Certificate issuer: /CN=448331851b3559d3cc8299f6b020ef378e2e4b04 Certificate serial: 019B35331690DBAC1CB8C25EE1DB3B93F78C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RIMxhRs1WdPMgpn2sCDvN44uSwQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/2a9acf-2f1e-4c9c-b810-a047816d6283/1/RIMxhRs1WdPMgpn2sCDvN44uSwQ.mft Manifest number: 08B4 Signing time: Fri 19 Dec 2025 06:01:39 +0000 Manifest this update: Fri 19 Dec 2025 06:01:39 +0000 Manifest next update: Sat 20 Dec 2025 06:01:39 +0000 Files and hashes: 1: Mr0WRrlMlv0_Evxeakjpwz7LiPg.roa (hash: gsCCcQlF73dWTqboxZPlvCMCNzkEYN7/m7aejhTDik0=) 2: RIMxhRs1WdPMgpn2sCDvN44uSwQ.crl (hash: yl/kxLdRZxd7FXfROfMJLFrT2M+T208SnyzdK5cChXQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/2a9acf-2f1e-4c9c-b810-a047816d6283/1/RIMxhRs1WdPMgpn2sCDvN44uSwQ.crl rsync://rpki.ripe.net/repository/DEFAULT/cb/2a9acf-2f1e-4c9c-b810-a047816d6283/1/RIMxhRs1WdPMgpn2sCDvN44uSwQ.mft rsync://rpki.ripe.net/repository/DEFAULT/RIMxhRs1WdPMgpn2sCDvN44uSwQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 06:01:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:33:16:90:db:ac:1c:b8:c2:5e:e1:db:3b:93:f7:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=448331851b3559d3cc8299f6b020ef378e2e4b04 Validity Not Before: Dec 19 06:01:39 2025 GMT Not After : Dec 20 06:01:39 2025 GMT Subject: CN=a5e4f6a4017c420ae15422a569eea447cf469cfb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:33:bb:55:72:76:6e:fd:bd:38:8e:3b:04:7f: 56:90:ba:bf:33:73:13:77:40:c7:24:1e:51:f8:6f: 3f:7f:67:7e:7e:5e:30:77:af:8d:29:c7:63:f1:2b: 46:55:79:db:b1:55:03:12:e8:0f:7f:aa:bc:78:d2: a5:01:19:a2:65:b3:45:ec:27:d9:7f:20:ec:c7:4c: 37:7b:d2:82:94:b6:3f:f1:e8:81:ba:db:5f:e1:1d: ef:b7:4f:e2:8a:27:71:25:95:ce:59:a4:13:55:35: ff:3d:2b:ba:2e:b1:91:eb:cc:55:4c:c1:de:ce:65: 3d:1d:81:9d:4a:06:6e:be:fb:dd:48:48:25:ac:34: 02:b6:4c:10:23:d1:7a:98:3f:57:d0:fa:23:b9:40: df:19:b1:9a:0a:0c:ae:fd:19:1b:96:56:d1:20:81: 36:5b:dc:55:43:0f:db:1c:8b:c8:d8:3c:9a:da:78: 38:3c:1a:42:16:61:2a:f0:b6:aa:d8:53:71:46:e3: f7:76:cb:cb:e2:eb:ca:a5:79:5c:97:99:64:2d:f0: fa:4b:3c:a6:a1:32:53:2e:1e:61:48:e7:d5:36:12: 1c:c8:10:08:e4:f8:6e:ef:ed:4b:c3:74:39:42:86: 7e:58:34:fd:b9:58:41:c5:5e:9d:43:ea:de:7e:3c: 13:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:E4:F6:A4:01:7C:42:0A:E1:54:22:A5:69:EE:A4:47:CF:46:9C:FB X509v3 Authority Key Identifier: keyid:44:83:31:85:1B:35:59:D3:CC:82:99:F6:B0:20:EF:37:8E:2E:4B:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RIMxhRs1WdPMgpn2sCDvN44uSwQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/2a9acf-2f1e-4c9c-b810-a047816d6283/1/RIMxhRs1WdPMgpn2sCDvN44uSwQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/2a9acf-2f1e-4c9c-b810-a047816d6283/1/RIMxhRs1WdPMgpn2sCDvN44uSwQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:a0:f6:55:d7:99:81:22:54:9a:82:0b:aa:e1:20:5c:14:5b: df:ff:e6:aa:66:8b:11:70:bc:1a:8b:5b:f6:d1:bc:c1:da:18: 96:75:73:48:5d:db:b6:4f:5e:e5:e3:4b:80:67:98:a8:2c:4a: f8:bc:86:7c:38:3e:b8:35:db:5f:be:21:5c:7e:fd:b2:77:22: 50:2c:9f:da:7f:b9:49:a5:ce:fd:88:6d:93:7b:3b:a3:5e:a5: e8:1c:27:06:23:59:7a:7b:53:76:53:8c:28:e9:fb:9a:a9:ea: 8a:54:1c:42:95:63:5f:a8:9e:e6:86:66:04:ff:41:b5:f0:3d: cd:a9:fe:28:29:19:4f:83:25:9e:a6:aa:14:f5:28:e0:a9:9f: 38:25:ef:65:ff:a4:07:29:a6:90:01:8e:ec:de:ac:fe:41:a7: 18:fc:4a:cd:f1:87:87:6b:35:84:15:58:8e:8c:51:0a:2c:30: 1e:28:dd:27:33:6b:61:43:60:65:f1:7f:47:2f:cc:c0:88:4c: c4:e6:bb:e0:60:55:73:82:51:22:44:d7:5f:58:e1:42:37:cf: ab:44:fd:73:81:59:71:86:24:37:a0:56:14:a8:cf:f3:c3:66: 22:79:10:2c:1c:d2:37:6a:b6:ae:ae:a1:c9:37:f9:06:c1:4d: bf:18:15:00 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1MxaQ26wcuMJe4ds7k/eMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0ODMzMTg1MWIzNTU5ZDNjYzgyOTlmNmIwMjBlZjM3OGUy ZTRiMDQwHhcNMjUxMjE5MDYwMTM5WhcNMjUxMjIwMDYwMTM5WjAzMTEwLwYDVQQD EyhhNWU0ZjZhNDAxN2M0MjBhZTE1NDIyYTU2OWVlYTQ0N2NmNDY5Y2ZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1zO7VXJ2bv29OI47BH9WkLq/M3MT d0DHJB5R+G8/f2d+fl4wd6+NKcdj8StGVXnbsVUDEugPf6q8eNKlARmiZbNF7CfZ fyDsx0w3e9KClLY/8eiButtf4R3vt0/iiidxJZXOWaQTVTX/PSu6LrGR68xVTMHe zmU9HYGdSgZuvvvdSEglrDQCtkwQI9F6mD9X0PojuUDfGbGaCgyu/RkbllbRIIE2 W9xVQw/bHIvI2Dya2ng4PBpCFmEq8Laq2FNxRuP3dsvL4uvKpXlcl5lkLfD6Szym oTJTLh5hSOfVNhIcyBAI5Phu7+1Lw3Q5QoZ+WDT9uVhBxV6dQ+refjwTlQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKXk9qQBfEIK4VQipWnupEfPRpz7MB8GA1UdIwQY MBaAFESDMYUbNVnTzIKZ9rAg7zeOLksEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUklNeGhSczFXZFBNZ3BuMnNDRHZONDR1U3dRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi8yYTlhY2YtMmYxZS00YzljLWI4MTAt YTA0NzgxNmQ2MjgzLzEvUklNeGhSczFXZFBNZ3BuMnNDRHZONDR1U3dRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYi8yYTlhY2YtMmYxZS00YzljLWI4MTAtYTA0NzgxNmQ2Mjgz LzEvUklNeGhSczFXZFBNZ3BuMnNDRHZONDR1U3dRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHaD2VdeZ gSJUmoILquEgXBRb3//mqmaLEXC8Gotb9tG8wdoYlnVzSF3btk9e5eNLgGeYqCxK +LyGfDg+uDXbX74hXH79snciUCyf2n+5SaXO/Yhtk3s7o16l6BwnBiNZentTdlOM KOn7mqnqilQcQpVjX6ie5oZmBP9BtfA9zan+KCkZT4MlnqaqFPUo4KmfOCXvZf+k BymmkAGO7N6s/kGnGPxKzfGHh2s1hBVYjoxRCiwwHijdJzNrYUNgZfF/Ry/MwIhM xOa74GBVc4JRIkTXX1jhQjfPq0T9c4FZcYYkN6BWFKjP88NmInkQLBzSN2q2rq6h yTf5BsFNvxgVAA== -----END CERTIFICATE-----Generated at Fri Dec 19 10:35:19 2025 by rpki-client